
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BF849/C42A4AD838BC11EDB0AFB864C4F9AE02/A5D6438038C011ED8D00366CC4F9AE02.roa
File: A5D6438038C011ED8D00366CC4F9AE02.roa (raw, json)
Hash identifier: V/czw6DO+AdnOyiJnSDUX4sGfKmyc6Hc7wsA62pSxko=
Subject key identifier: F5:54:E9:7E:E0:00:24:89:E1:FF:A1:FD:FF:86:B1:DA:3E:CC:A8:E4
Certificate issuer: /CN=A91BF849/serialNumber=801BAD8CB22641DDEDE4DBD39F4BE7F4D8CAEA55
Certificate serial: 02FE
Authority key identifier: 80:1B:AD:8C:B2:26:41:DD:ED:E4:DB:D3:9F:4B:E7:F4:D8:CA:EA:55
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gButjLImQd3t5NvTn0vn9NjK6lU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BF849/C42A4AD838BC11EDB0AFB864C4F9AE02/A5D6438038C011ED8D00366CC4F9AE02.roa
Signing time: Thu 13 Aug 2026 00:51:25 +0000
ROA not before: Thu 13 Aug 2026 00:51:25 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 135549
IP address blocks: 103.65.184.0/22 maxlen: 22
103.65.184.0/23 maxlen: 23
103.65.184.0/24 maxlen: 24
103.65.185.0/24 maxlen: 24
103.65.186.0/23 maxlen: 23
103.65.186.0/24 maxlen: 24
103.65.187.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BF849/C42A4AD838BC11EDB0AFB864C4F9AE02/gButjLImQd3t5NvTn0vn9NjK6lU.crl
rsync://rpki.apnic.net/member_repository/A91BF849/C42A4AD838BC11EDB0AFB864C4F9AE02/gButjLImQd3t5NvTn0vn9NjK6lU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gButjLImQd3t5NvTn0vn9NjK6lU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 00:44:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 766 (0x2fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BF849, serialNumber=801BAD8CB22641DDEDE4DBD39F4BE7F4D8CAEA55
Validity
Not Before: Aug 13 00:51:25 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6a7d150d-cbee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:2f:79:01:50:98:6a:7f:f7:f1:76:3c:29:31:
e9:c6:c9:e1:a4:8f:bc:ee:62:bc:58:51:ca:2c:70:
d6:97:7b:52:74:a4:df:ff:ca:ee:b0:9e:56:60:98:
ad:2a:03:64:49:79:51:63:10:49:76:ee:77:cc:69:
9e:0d:d4:89:3a:0b:e8:76:96:ba:4e:38:47:1c:c3:
6a:fc:18:90:4c:c8:03:84:4b:95:81:b3:04:46:58:
a0:8e:3b:79:74:86:4b:8c:ba:4e:c4:a9:06:97:35:
8d:98:fa:94:09:45:94:43:a4:79:4d:43:0a:f5:be:
b0:c3:1c:dd:6a:0f:8b:14:2a:8c:2b:67:37:d0:db:
90:45:57:35:ef:5d:95:e8:6c:7f:ae:80:84:8f:7f:
ef:41:e5:e7:eb:f4:48:c4:7f:7b:44:df:a4:4f:88:
a5:25:85:e3:46:c1:17:14:fc:77:d2:f8:01:5c:61:
1e:1a:7c:93:14:8b:b2:46:cd:ee:48:7a:8b:e7:5f:
5d:01:07:93:c1:1f:9a:75:4c:0b:85:40:fa:6b:b7:
9b:ba:ec:5e:f4:ab:7a:a0:17:9b:de:b0:24:6e:d6:
81:15:25:a6:62:21:53:57:8a:6d:ab:06:11:bc:8f:
73:c7:91:78:5f:cc:8e:21:ac:40:b9:78:b2:87:bf:
00:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:54:E9:7E:E0:00:24:89:E1:FF:A1:FD:FF:86:B1:DA:3E:CC:A8:E4
X509v3 Authority Key Identifier:
keyid:80:1B:AD:8C:B2:26:41:DD:ED:E4:DB:D3:9F:4B:E7:F4:D8:CA:EA:55
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BF849/C42A4AD838BC11EDB0AFB864C4F9AE02/gButjLImQd3t5NvTn0vn9NjK6lU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gButjLImQd3t5NvTn0vn9NjK6lU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF849/C42A4AD838BC11EDB0AFB864C4F9AE02/A5D6438038C011ED8D00366CC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.65.184.0/22
Signature Algorithm: sha256WithRSAEncryption
0e:70:f7:ba:99:bf:5c:a7:0c:67:55:5c:52:d6:5e:3b:48:22:
1d:be:41:c8:bf:f2:61:b7:b1:ec:cf:25:4c:cf:93:52:a1:4e:
28:20:46:c5:4c:e7:ff:b0:64:bd:21:cb:1a:6d:1e:67:87:2f:
6b:68:7d:a6:83:1b:16:da:ad:89:47:00:29:13:ce:62:fa:1c:
19:2e:8a:4a:44:54:88:de:e6:7d:a0:f4:2b:ef:1e:1e:8b:a4:
41:3c:b0:69:5e:0b:63:3a:bf:86:52:9c:f2:9f:b8:2f:19:76:
ee:17:02:5b:5a:fe:f4:3c:90:eb:9a:18:80:11:a4:20:cb:c3:
29:91:71:80:fa:02:3d:30:1f:01:76:78:eb:43:83:74:79:2b:
94:c9:57:eb:e7:58:ef:5a:43:74:06:22:85:63:df:3c:60:36:
38:4d:93:8f:ce:e2:6a:07:c5:c4:fe:e9:e9:c7:08:61:3a:c3:
a7:99:5a:f7:71:5c:2d:2d:d5:0b:f4:00:86:85:eb:5e:67:af:
a4:03:44:a1:13:60:8d:39:7a:0e:22:57:0c:99:e8:6b:75:ad:
45:6a:91:71:08:30:19:03:97:58:87:35:01:a3:22:1c:ea:c0:
5c:74:b4:5f:43:76:f9:43:0b:32:31:7a:d0:9a:5c:24:dd:63:
41:65:f5:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 12:52:46 2026 by rpki-client